APP_ID

APP_SECRET

ACCESS_TOKEN

Access token (short-lived or long-lived) obtained through Authorization Flow

POST_ID

TIMESTAMP

INPUT_TOKEN

Access token (short-lived or long-lived) associated with YOU, the Facebook App owner

OWNER_ACCESS_TOKEN

Owner's access token (short-lived or long-lived) obtained

CREATED_TIME

Facebook’s Graph API is the central means for programmatic access to Facebook data.  It is the entry point for reading and writing to Facebook’s “social graph”. 

This course begins with a discussion of the major concepts of the Facebook Graph API. You will learn basic concepts like authentication, authorization, and access tokens. Then, you will build out your mini-project step by step by deploying the "Login with Facebook"  web page. By the end, you will have a thorough understanding of how to build API integrations in your own projects.

Facebook Login and the Facebook Graph API

## Facebook Login for authentication and authorization

As we mentioned in the previous lesson, our web application will need to use Facebook Login for authentication _and_ authorization since we intend to use the Graph API to access Facebook data on behalf of our users.

We are going to set aside the authentication part for now, since _authorization_ is the part that is much more critical to our needs for this course.

You will recall that authorization is the determination of the kinds of resources that a person (or in our case: our web application) has permission to access. These resources include data our application can read and operations that our application can perform.

# Facebook Login for authentication and authorization

As we mentioned in the previous lesson, our web application will need to use Facebook Login for authentication _and_ authorization since we intend to use the Graph API to access Facebook data on behalf of our users.

We are going to set aside the authentication part for now, since _authorization_ is the part that is much more critical to our needs for this course.

You will recall that authorization is the determination of the kinds of resources that a person (or in our case: our web application) has permission to access. These resources include data our application can read and operations that our application can perform.

Familiarize yourself with different types of access tokens.

__default

Facebook Login and Access Tokens

Facebook Login for authentication and authorization